← Vulnerability feed

Vulnerability record · CVE-2024-27135 · published 12 March 2024

CVE-2024-27135: Apache pulsar improper input validation vulnerability

Apache · Pulsar

Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of the sandboxes designated for running user-provided functions. This vulnerability also applies to the Pulsar Broker when it is configured with "functionsWorkerEnabled=true". This issue affects Apache Pulsar versions from 2.4.0 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. 2.10 Pulsar Function Worker users should upgrade to at least 2.10.6. 2.11 Pulsar Function Worker users should upgrade to at least 2.11.4. 3.0 Pulsar Function Worker users should upgrade to at least 3.0.3. 3.1 Pulsar Function Worker users should upgrade to at least 3.1.3. 3.2 Pulsar Function Worker users should upgrade to at least 3.2.1. Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions.

9.9 CVSS 3.1 Critical EPSS 6.0% · top 6.9% CWE-20 · Improper input validationCWE-913 · Improper control of dynamically-managed code
9.9CVSS 3.1 base score
6.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of the sandboxes designated for running user-provided functions. This vulnerability also applies to the Pulsar Broker when it is configured with "functionsWorkerEnabled=true". This issue affects Apache Pulsar versions from 2.4.0 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. 2.10 Pulsar Function Worker users should upgrade to at least 2.10.6. 2.11 Pulsar Function Worker users should upgrade to at least 2.11.4. 3.0 Pulsar Function Worker users should upgrade to at least 3.0.3. 3.1 Pulsar Function Worker users should upgrade to at least 3.1.3. 3.2 Pulsar Function Worker users should upgrade to at least 3.2.1. Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.openwall.com/lists/oss-security/2024/03/12/9 Mailing ListThird Party Advisory
https://lists.apache.org/thread/dh8nj2vmb2br6thjltq74lk9jxkz62wn Vendor Advisory
https://pulsar.apache.org/security/CVE-2024-27135/ Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/03/12/9 Mailing ListThird Party Advisory
https://lists.apache.org/thread/dh8nj2vmb2br6thjltq74lk9jxkz62wn Vendor Advisory
https://pulsar.apache.org/security/CVE-2024-27135/ Vendor Advisory

Track CVE-2024-27135 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2024-27317Apache Pulsar Functions Worker zip extraction path traversalAuthenticated users can upload function jar or nar files to the Pulsar Functions Worker, which extracts them as zip archives without validating filen…EPSS 57%analysed9.8CVE-2021-22160Apache Pulsar JWT authentication bypass via alg=noneApache Pulsar, when configured to authenticate clients with JWT-based tokens, fails to validate the token signature if the presented token declares t…EPSS 53%analysed8.8CVE-2024-27894Apache pulsar improper input validation vulnerabilityThe Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the function's implementation is referen…EPSS 1.9%8.8CVE-2023-30429Apache pulsar incorrect authorization vulnerabilityIncorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: before 2.10.4, and 2.11.0. When …EPSS 1.0%8.2CVE-2022-34321Apache pulsar missing authentication for critical function vulnerabilityImproper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The v…EPSS 1.8%8.1CVE-2023-30428Apache pulsar incorrect authorization vulnerabilityIncorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenticated user with a custom HTTP…EPSS 0.82%8.1CVE-2022-33684Apache pulsar improper certificate validation vulnerabilityThe Apache Pulsar C++ Client does not verify peer TLS certificates when making HTTPS calls for the OAuth2.0 Client Credential Flow, even when tlsAllo…EPSS 0.74%7.5CVE-2023-37544Apache pulsar improper authentication vulnerabilityImproper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong endpoint without authentication…EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2024-27135), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.